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Top Stories 

• Authorities are continuing to investigate the incident a laptop theft that compromised 
729,000 San Gabriel Valley, California-based AHMC hospital patient files. - Los Angeles 
Times (See item 19 ) 

• A student at a middle school in Sparks, Nevada, shot and killed a teacher and wounded two 
other students before shooting and killing himself. -Associated Press (See item 21 ) 

• Eight officers and 13 enlisted members of an Arizona Air National Guard were indicted on 
charges they falsified military records to defraud the U.S. government for additional pay - 
Reuters (See item 22) 

• Google canceled several Developer accounts and removed several Android apps from its Google 
Play store found to be using an unnamed mobile app library dubbed Vulna. - The Register (See 
item 25) 
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Energy Sector 



1. October 21, St. Paul Pioneer Press - (Minnesota) Xcel’s Sherco power plant Unit 3 
is back online. After suffering a disastrous failure November 2011, Unit 3 of Xcel 
Energy’s Sherco power plant near Becker, Minnesota, was back online after 2 years 
and undergoing more than $200 million in repairs. Investigators determined the unit’s 
failure was a result of the design after stress corrosion prompted extensive cracking in 
one row of turbine blades. 

Source: http://www.twincities.com/business/ci 24356569/xcels-sherco-power-plant- 
unit-3-is-back 

2. October 21, Reuters - (North Dakota) Tesoro says no date set to restart burst North 
Dakota pipeline. Tesoro Logistics LP announced October 21 it still did not have a date 
to restart the oil pipeline in North Dakota that spilled 20,600 barrels of crude onto 
farmland after a portion of the 6 inch pipeline ruptured. The company has collected 
3,400 barrels of the spilled oil, and removed and sent the ruptured pipeline for analysis. 
Source: http://www.chicagotribune.com/business/sns-rt-us-tesoro-pipeline-spill- 

201 3 1021, 0,245601 2.storv 

3. October 21, Saginaw News - (Michigan) More than 20,000 Saginaw County 
Consumers Energy customers without power; restoration expected soon. A 

problem with a primary electrical line caused approximately 20,800 Consumers Energy 
homes and businesses in Saginaw County to lose power October 21. Crews worked to 
restore service. 

Source: 

http://www.mlive.com/news/saginaw/index.ssf/2013/10/more than 20k saginaw coun 
ty c.html 

4. October 21, Associated Press - (California) Hundreds evacuated, 30 treated as 
mystery odor empties Southern California call center. Nearly 300 people were 
evacuated from a Southern California Edison call center in Long Beach October 21, 
with 30 being treated after complaining of illness. A HAZMAT team cleared the scene 
several hours later without finding the cause of the odor. 

Source: 

http://www.dailvioumal.net/view/storv/bdc78983637b498fa628c6ca4917a215/CA— 
Call-Center-Evacuated/#.Umab2 mkqM5 

For another story, see item 11 
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Chemical Industry Sector 



5. October 21, Green Bay Press Gazette - (Wisconsin) Unclear which chemicals forced 
evacuation, street closures. A chemical reaction at the Carboline Co., of Green Bay 
forced the evacuation of a business and closure of nearby streets while a hazardous- 
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materials team evaluated the scene October 21. Officials are investigating the cause of 
the incident. 

Source: http ://w w w . greenbaypress gazette.com/article/20 131021 /GPGO 101/310210185/ 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

6. October 22, Associated Press - (National) Hyundai to recall Genesis cars to fix 
brakes. Hyundai announced a recall of around 27,500 model year 2009-2012 Genesis 
vehicles due to an issue involving the vehicles’ braking systems. 

Source: http://www.foxnews.com/leisure/2013/10/22/hvundai-to-recall-genesis-cars-to- 
fix-brakes/ 

7. October 21, Renton Reporter - (Washington) Renton aerospace parts manufacturer 
pays $24,000 Ecology fine. AIM Aerospace Inc. was fined $24,000 by the Washington 
Department of Ecology for three repeat violations at its Renton facility that involved 
failures to properly label and dispose of hazardous waste. 

Source: http://www.rentonreporter.com/news/228654911.html 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

8. October 22, U.S. Securities and Exchange Commission - (International) SEC charges 
Diebold with FCPA violations. The U.S. Securities and Exchange Commission 
charged ATM and bank security systems manufacturer Diebold with violating the 
Foreign Corrupt Practices Act by allegedly bribing government-owned bank officials in 
China and Indonesia and then recording the bribes as legitimate expenses, in addition to 
allegedly falsifying records to hide $1.2 million in bribes to employees of private banks 
in Russia. Diebold agreed to pay more than $48 million to resolve the charges and to 
resolve U.S. Department of lustice criminal charges related to the violations. 

Source: http://www.sec.gov/News/PressRelease/Detail/PressRelease/1370539977273 
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9. October 22, Softpedia - (International) Eastern European banking systems targeted 
by hackers in Apollo campaign. Trend Micro published a white paper on a 
cybercrime campaign dubbed Apollo that is using a variant of the Zeus trojan to steal 
banking credentials and other information from customers of major eastern European 
banks. The campaign also utilizes tools such as Pony Loader, Ann Loader, and the 
Bleeding Life exploit pack. 

Source: http://news.softpedia.com/news/Eastern-European-Banking-Svstems-Targeted- 
by-Hackers-in-Apollo-Campaign-393332.shtml 
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Transportation Systems Sector 

10. October 22, Honolulu Star-Advertiser - (Hawaii) Mokulele Express plane lands 
safely on Maui highway. A Mokulele Express plane made an emergency landing on 
the northbound lane of Piilani Highway in Kihei due to engine trouble and caused the 
closure of the Piilani Highway between Kilohana and Wailea Ike Drive for 2 hours 
October 21. The Hawaii Department of Transportation is investigating the incident. 
Source: 

http://www.staradvertiser.com/news/breaking/20131021 None hurt as plane makes 
emergency landing on Maui highway.html 

11. October 21, Omaha Worlcl-Herald - (Iowa) Spike in Council Bluffs copper thefts 
befuddles law enforcement. Interstate 29 in and around Council Bluffs has been the 
target of several recent copper thefts, with 25,000 feet of wire stolen from lighting 
systems since July 1. 

Source: http : //w w w. omaha. com/article/20 131021 /NEW S/131029818 

12. October 21, Associated Press - (New Jersey; New York; Pennsylvania) Amtrak, NJ 
Transit service interrupted by accident. A fatal Amtrak train accident near the 
Metropark station in Woodbridge Township suspended service in both directions on the 
Northeast Corridor and reduced speeds between Philadelphia and New York City for an 
undisclosed amount of time October 21. 

Source: 

http://www.phillv.com/phillv/news/20131021 ap 3bb49f87ed4043b7ae2759b6d20753 
f4.html 

13. October 21, Dickinson Press - (North Dakota) Butane leak in crash causes 
evacuation, highway shutdown east of New Town. An accident involving a semi- 
truck carrying hazardous material at North Dakota Highways 8 and 23 caused the 
closure of the intersection and evacuation of a l-mile radius east of New Town due to 
leaking butane October 18. The crash is still under investigation. 

Source: http://www.thedickinsonpress.com/event/article/id/73143/ 

14. October 21, NBC News - (North Carolina) Plane briefly detained in NC after 
suspicious note found on board. A US Airways flight from Buffalo, New York made 
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an emergency landing at Charlotte Douglas International Airport October 21 after a 
suspicious note was found on board. The FBI is investigating the incident. 

Source: http : //usnews .nbcne ws .com/ news/20 13/1 0/2 1/210661 69-plane-briefi y- 
detained-in-nc-after-suspicious-note-found-on-board?lite 

15. October 21, Chicago Tribune - (Wisconsin) Metra train hits semi carrying cars on 
Milwaukee District West Line in Bartlett. An accident involving a Metra train that 
collided with a semi-truck in Bartlett injured two and caused significant damage and 
rail delays October 21. Police are investigating the incident. 

Source: http://www.chicagotribune.com/news/local/breaking/chi-metra-train-hits- 

semitruck-carrying-vehicles-on-milwaukee-district-west-line- 

20131021,0,2291874.storv 
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Food and Agriculture Sector 

16. October 21, U.S. Food and Drug Administration - (National) Price Chopper 
Supermarkets recalls coconut custard pies. Price Chopper Supermarkets recalled 
Price Chopper eight inch and ten inch coconut custard pies due to a lack of ingredient 
information on the label that does not disclose that the pies contain milk, egg, soy, 
wheat, and tree nut. 

Source: http://www.fda.gov/Safety/Recalls/ucm371614.htm 
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Water and Wastewater Systems Sector 

17. October 21, KDRV 12 Medford - (Oregon) Red dye test causes plant shutdown. The 
Grants Pass Water Treatment facility near White City briefly shut down October 17 
after a non-toxic red dye plume used October 16 to measure dispersal at the upriver 
Medford Sewage Treatment Plant unexpectedly stayed intact and was visible in the 
Grants Pass plant’s filters. Officials determined there was no risk to water quality. 
Source: http://www.kdrv.com/47238/ 

18. October 21, Associated Press - (Kentucky) Lexington upgrading sewers with dozens 
of projects. The mayor of Lexington announced that the city has begun the first of over 
80 sanitary sewer improvement projects agreed to in a deal with the U.S. 

Environmental Protection Agency. The improvements are estimated to cost $600 
million and are intended to eliminate sanitary sewer overflows. 

Source: http://www.wtvq.com/content/statenews/storv/Lexington-upgrading-sewers- 
with-dozens-of-proiects/SBLqN0GmwkSf9BbIh30MSQ.cspx 
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Healthcare and Public Health Sector 



19. October 21, Los Angeles Times - (California) Laptop theft compromise 729,000 
hospital patient files. San Gabriel Valley-based AHMC notified 729,000 patients that 
their personal and health information may have been compromised after two password- 
protected laptops were stolen from an office on a medical campus October 12. 
Authorities do not believe the information was accessed or used, and are continuing to 
investigate the incident. 

Source: http://www.latimes.com/local/la-me-hospital-theft- 
20 1 3 1 022,0, 1 93607 8 . story#axzz2iSURnZb 

20. October 21, Long Island Newsday - (New York) Official: 7 hospitalized after 
nursing center blaze. The Marquis Rehabilitation and Nursing Center in Glen Cove 
was evacuated while 4 injured residents and 3 injured staff members were transported 
to area hospitals after a fire broke out October 21 in a resident’s bedroom. The cause of 
the fire is under investigation. 

Source: http://www.newsday.com/long-island/nassau/official-7-hospitalized-after- 
nursing-center-blaze- 1 .6294422 
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Government Facilities Sector 

21. October 22, Associated Press - (Nevada) Teacher called hero in fatal Nevada school 
shooting. A student killed himself after he shot and killed a teacher and wounded two 
other students from Sparks Middle School in Nevada October 21 when he entered 
school grounds and began firing. The middle school and adjacent elementary school 
was closed for the remainder of the week while authorities investigate. 

Source: http://news.msn.com/crime-iustice/teacher-called-hero-in-fatal-nevada-school- 
shooting 

22. October 21, Reuters - (Arizona) National Guard members indicted on fraud 
charges. Eight officers and 13 enlisted members of an Arizona Air National Guard unit 
in Tucson were indicted October 21 on charges they falsified military records to 
defraud the U.S. government out of hundreds of thousands of dollars of additional pay 
meant for troops on deployment. The individuals allegedly used fake home addresses to 
collect extra pay from November 2007 through September 2010, earning over 
$ 100 , 000 . 

Source: http://news.msn.com/crime-iustice/national-guard-members-indicted-on-fraud- 
charges 
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Emergency Services Sector 



23. October 22, CNN - (Florida) Fake papers for Florida cons called ‘cottage industry.’ 

The commissioner of the Florida Department of Faw Enforcement announced there 
were five other instances of using forged documents in an attempt to cut down time 
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from Florida inmate’s sentences. Authorities determined an individual was paid $8,000 
to create fake documents, part of an organized illicit business. 

Source: http://edition.cnn.com/2013/10/21/iustice/florida-inmates-mistakenly- 
freed/index.html 



24. October 21, Florence Times Daily - (Alabama) Ex-fire department treasurer admits 
guilt in funds theft. The former treasurer of Cloverdale Volunteer Fire Department 
pleaded guilty and was sentenced in Florence, Alabama, after admitting to taking over 
$39,000 by using the department’s credit card for personal expenses. 

Source: http://www.timesdailv.com/news/local/article aa3ca418-3ad3-lle3-b362- 
001a4bcf6878.html 
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Information Technology Sector 

25. October 22, The Register - (International) Google pulls all Android apps linked to 
adware badness THAT MUST NOT BE NAMED. Google removed several Android 
apps from its Google Play store found to be using an unnamed mobile app library 
dubbed Vulna after it was reported that the library poses a major security risk. Google 
also canceled several Developer accounts associated with apps found to be exploiting 
the app library vulnerability. 

Source: http://www.theregister.co.uk/2013/10/22/vulna mobile ad threat followup/ 

26. October 22, Softpedia - (International) Cutwail cybercriminals replace BlackHole 
with Magnitude exploit kit. Researchers at Dell’s SecureWorks reported that a 
cybercriminal group that uses the Cutwail spam botnet to distribute malware has 
switched from using the BlackHole exploit kit to using Magnitude (Popads) following 
the arrest of BlackHole’s alleged creator. Trend Micro also reported that all major 
campaigns utilizing BlackHole have ended following the arrest. 

Source: http://news.softpedia.com/news/Cutwail-Cvbercriminals-Replace-BlackHole- 
with-Magnitude-Exploit-Kit-39327 1 .shtml 

27. October 22, The Register - (International) D-Link hole-prober finds ‘backdoor’ in 
Chinese wireless routers. Security researchers reported finding a backdoor in Tenda 
wireless routers that could be used by attackers to take over the router and execute 
commands via a UDP packet with a special string. 

Source: http://www.theregister.co.uk/2013/10/22/tenda router backdoor/ 

28. October 21, The Register - (International) Facebook switches itself off and on again 
after GLOBAL meltdown. Facebook suffered an outage October 21 that prevented 
users from posting comments and using other functions for around 2 hours. 

Source: http://www.theregister.co.uk/2013/10/21/facebook back online outage/ 



29. October 21, The Register - (International) Now swallow: Microsoft hands out cure 
for Surface RT tabs killed by Win 8.1. Microsoft released a recover image for 
Surface RT tablets that were affected by a faulty Windows 8.1 upgrade that caused 
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some tablets to boot to an error message. 

Source: http://www.theregister.co.uk/2013/10/21/surface rt recovery image/ 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-ccrt.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

30. October 21, Associated Press - (Arizona) 70 people evacuated during Tucson hotel 
fire. Authorities are investigating after a fire in a room prompted the evacuation of 
approximately 70 people from a 3-story hotel in Tucson. 

Source: http://www.mvfoxphoenix.com/storv/23744449/70-people-evacuated-during- 
tucson-hotel-fire 

31. October 21, Fort Collins Coloradoan - (Colorado) Bomb squad clears apartment 
after explosion damages unit, blows refrigerator to pieces. The 12-unit East Stuart 
Street apartment in Fort Collins was evacuated after an explosion occurred centered 
around a refrigerator in a ground-floor apartment October 21. 

Source: http ://www .Coloradoan. com/article/20 131021 /NEW SOI/13 1021012 

32. October 21, American- Statesman - (Texas) Chlorine fumes at downtown YMCA 
send two to hospital. Chlorine fumes caused by a blocked valve at a YMCA in Austin 
sent two people to the hospital and closed the pool area for a brief period October 21. 
Source: http://www.statesman.com/news/news/local/chlorine-fumes-at-downtown- 
ymca-send-two-to-hospit/nbTR7/ 

For another story, see item 3 
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Dams Sector 



Nothing to report 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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